NetBSD/pkgsrc gG15vGgdoc CHANGES-2026

   doc: Updated www/ruby-aws-partitions to 1.1245.0
VersionDeltaFile
1.2853+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc xkplJ85www/ruby-aws-partitions distinfo Makefile

   www/ruby-aws-partitions: update to 1.1245.0

   1.1245.0 (2026-05-05)

   * Feature - Updated the partitions source data that determines the AWS
     service regions and endpoints.
VersionDeltaFile
1.114+4-4www/ruby-aws-partitions/distinfo
1.112+2-2www/ruby-aws-partitions/Makefile
+6-62 files

NetBSD/pkgsrc B4Nyvvidoc CHANGES-2026

   doc: Updated finance/ruby-braintree to 4.36.0
VersionDeltaFile
1.2852+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 7IUEU8xfinance/ruby-braintree PLIST distinfo

   finance/ruby-braintree: update to 4.36.0

   4.36.0 (2026-05-05)

   * Add Local Payment Context support with LocalPaymentContextGateway.create
     and LocalPaymentContextGateway.find methods
   * Add support for MBWAY and CRYPTO payment types
   * Add acquirerReferenceNumber to transaction search object
   * Add international_phone to Customer in Transaction
   * Deprecate merchant create functionality
   * Add apiRequestKey (idempotency) for sale, credit, refund, void and
     settlement operations.
   * Add support for Ruby version 3.4.0, 4.0 and updated rubocop to 1.85.1 for
     Ruby versions 2.7 and later
   * Add surcharge_amount to transaction object
   * Add support for apple pay card verifications
VersionDeltaFile
1.23+18-1finance/ruby-braintree/PLIST
1.38+4-4finance/ruby-braintree/distinfo
1.35+2-2finance/ruby-braintree/Makefile
+24-73 files

NetBSD/src 2Vlrpbjsys/arch/m68k/m68k pmap_68k.c

   Add a comment describing why we seed the U and M bits in the PTE based
   on the access that resulted in the page fault that got us to pmap_enter().
VersionDeltaFile
1.62+8-2sys/arch/m68k/m68k/pmap_68k.c
+8-21 files

NetBSD/src mbSaGQisys/arch/m68k/m68k pmap_68k.c

   Update comments reflecting current status on mac68k.
VersionDeltaFile
1.61+8-6sys/arch/m68k/m68k/pmap_68k.c
+8-61 files

NetBSD/src CZ4V9ozsys/arch/mac68k/mac68k machdep.c macrom.c

   In the __HAVE_NEW_PMAP_68K case, use machine_bootmap[] to map the I/O
   area VA==PA.  With the Utah pmap, the I/O area was mapped at some
   arbitrary KVA in pmap_bootstrap() and then double-mapped VA==PA in
   mrg_init().  Initially, the new pmap case did this, as well, but then
   mrg_init() blew up because no page tables were present for the address
   it attempted to use.  Now that pmap_bootstrap1() ensures that PTs are
   allocated for FIXEDVA entries in machine_bootmap[], we can just have
   the one mapping.

   Confirmed by nat@ that this makes mac68k boot and run with the new
   pmap, but there are still gremlins when running the X server.
VersionDeltaFile
1.388+9-4sys/arch/mac68k/mac68k/machdep.c
1.77+8-2sys/arch/mac68k/mac68k/macrom.c
+17-62 files

NetBSD/pkgsrc-wip 1bc053bforge distinfo go-modules.mk

forge: Update to 0.4.2

Changes:
v0.4.2
* Ignore ssh_host from project .forge config
* Strip control characters from forge-sourced text before printing
* Update dependencies

v0.4.1
* Use cosign v4 bundle format for release signing
* Update dependencies
DeltaFile
+21-21forge/distinfo
+6-6forge/go-modules.mk
+1-1forge/Makefile
+28-283 files

NetBSD/src DJtC4A8libexec/httpd tilde-luzah-bozo.c

   Fix double free of hr_file (later handled by bozo_clean_request())

   Also hr_file_free should be used for free(3) (it fixes "//~user/" case
   in which hr_file points to the last slash in the prefix).
VersionDeltaFile
1.17+3-3libexec/httpd/tilde-luzah-bozo.c
+3-31 files

NetBSD/pkgsrc PH9Jrrmdoc CHANGES-2026

   Updated security/py-authlib, databases/py-pymysql
VersionDeltaFile
1.2851+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc vh6D0eZdatabases/py-pymysql distinfo Makefile

   py-pymysql: updated to 1.1.3

   v1.1.3

   Security

   * Fix `Cursor.callproc()` didn't escape procedure name.
     There was a possibility of SQL injection when calling a procedure with a string received from an untrusted source as the procedure name.

     NOTICE: This change may cause backward compatibility issues. If you specified a procedure name like `"dbname.funcname"`, the previous version called `CALL dbname.funcname`, but from this version, it will call ``CALL `dbname.funcname` `` so you cannot specify procedure name with database name anymore.
VersionDeltaFile
1.15+4-4databases/py-pymysql/distinfo
1.22+2-2databases/py-pymysql/Makefile
+6-62 files

NetBSD/pkgsrc pBknJH8security/py-authlib DESCR distinfo

   py-authlib: updated to 1.7.2

   1.7.2

   Fix the readme links
   Allow non-recommended algorithms in ClientSecretJWT and PrivateKey
   Validate BCP47 language tags with a regex
   Fix RFC7523 signing with non RSA keys
VersionDeltaFile
1.3+13-2security/py-authlib/DESCR
1.35+4-4security/py-authlib/distinfo
1.38+3-3security/py-authlib/Makefile
1.12+4-1security/py-authlib/PLIST
+24-104 files

NetBSD/pkgsrc WJYOvc2doc CHANGES-2026

   Updated devel/memcached
VersionDeltaFile
1.2850+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc K2xToKPdevel/memcached distinfo Makefile

   memcached: updated to 1.6.41

   1.6.41

   Overview

   Important bugfix release over regressions starting from 1.6.34 and 1.6.40. The glitches are not likely critical but we want to raise awareness of them.

   In 1.6.34 we introduced new memory mover code. In very rare cases a bug can lead to the memory mover becoming unable to make progress and pages will no longer be moved for either a period of time or forever.

   This also introduced a rare crash when slabs_mover=2 start option is in use. However it is highly recommended that nobody use this option as it will give poor hit rates for most workloads.

   In 1.6.40 we introduced a rewritten protocol parser. The lru tuning command was made inaccessible and is now fixed in this release.

   Finally, this repairs a bug in extstore where frequently accessed items can be lost during data compaction. This has existed since extstore was written and is not a recent regression. It is more likely to happen on highly loaded systems with low memory available to keep active items in RAM vs disk.

   Several ASAN triggering but otherwise harmless bugs were also fixed.

   Fixes

    [15 lines not shown]
VersionDeltaFile
1.63+4-4devel/memcached/distinfo
1.96+2-2devel/memcached/Makefile
+6-62 files

NetBSD/pkgsrc 2NPA90ndoc CHANGES-2026

   Updated devel/py-gitpython, sysutils/py-fsspec
VersionDeltaFile
1.2849+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc LijPUuUsysutils/py-fsspec distinfo Makefile

   py-fsspec: updated to 2026.4.0

   2026.4.0

   Fixes

   - proper install in ci to grab versions
   - encode URLs in HTTP pipe_file
   - implement delete and write_test for dirFS
   - allow multiple local protocols
   - context closing for tar and zip
   - fix cat_file and cat_ranges for WholeFileCache

   Other

   - usage warning to HTTP FS
   - update adl: message following retirement
VersionDeltaFile
1.27+4-4sysutils/py-fsspec/distinfo
1.28+2-2sysutils/py-fsspec/Makefile
+6-62 files

NetBSD/pkgsrc rqbW1OIdevel/py-gitpython distinfo Makefile

   py-gitpython: updated to 3.1.50

   3.1.50
   Save setting of configuration values, this time sections as well, as follow-up to 3.1.49.
VersionDeltaFile
1.29+4-4devel/py-gitpython/distinfo
1.33+2-2devel/py-gitpython/Makefile
+6-62 files

NetBSD/src a0tgx2qcommon/lib/libc/atomic atomic_init_testset.c atomic_cas_16_cas.c

   Move two functions from atomic_init_testset.c

   sync_val_compare_and_swap_1 --> atomic_cas_8_cas.c
   sync_val_compare_and_swap_2 --> atomic_cas_16_cas.c

   this helps with pullups
VersionDeltaFile
1.23+2-26common/lib/libc/atomic/atomic_init_testset.c
1.5+13-1common/lib/libc/atomic/atomic_cas_16_cas.c
1.6+13-1common/lib/libc/atomic/atomic_cas_8_cas.c
+28-283 files

NetBSD/pkgsrc-wip 828f73enix TODO

nix: Add references to recent CVEs
DeltaFile
+1-1nix/TODO
+1-11 files

NetBSD/pkgsrc-wip 3ceb29dbusybox TODO

busybox: Add reference to CVE-2026-29004
DeltaFile
+1-1busybox/TODO
+1-11 files

NetBSD/pkgsrc LEQ8oRhdoc CHANGES-2026

   doc: Updated x11/xterm to 410
VersionDeltaFile
1.2848+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc Xu3tW1Nx11/xterm distinfo Makefile

   x11/xterm: update to 410

   Patch #410 - 2026/05/01

    - amend one of the fixes for Debian #738794 in patch #407, which caused combining characters to be outlined (report by "Martin").
    - clarify in ctlseqs.ms which modes listed for DECSET are readonly (prompted by discussion with Thomas Wolff).
VersionDeltaFile
1.127+4-4x11/xterm/distinfo
1.168+2-2x11/xterm/Makefile
+6-62 files

NetBSD/pkgsrc w8Npy5Bsysutils/yazi Makefile

   sysutils/yazi: add note on MSRV
VersionDeltaFile
1.36+2-1sysutils/yazi/Makefile
+2-11 files

NetBSD/pkgsrc Po7V07Cdoc CHANGES-2026

   doc: Updated sysutils/pciutils to 3.15.0
VersionDeltaFile
1.2847+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc fhIoPVDsysutils/pciutils distinfo Makefile, sysutils/pciutils/patches patch-Makefile patch-lib_libpci.pc.in

   sysutils/pciutils: update to 3.15.0

   2026-04-05  Martin Mares <mj at ucw.cz>

        * Released as 3.15.0.
        * New capabilities are decoded: MMIO Register Block Locator,
          Flit Error Injection, Flit Logging.
        * Decoding of PCIe capabilities updated to Gen7.
        * Both lspci and setpci warn when the "-s" or "-d" option
          is given multiple times.
        * Improved display of interrupts in "lspci -vv". Routing of
          interrupt pins is shown only if the pins are not disabled.
          Routing of MSI(X) interrupts is shown when available
          (which is currently supported by the sysfs back-end only).
        * Minor improvements to Windows back-ends.
        * The dump back-end can read the dump from stdin when given "-"
          as a file name.
        * FreeBSD supports 64-bit addresses.
        * Added README.DJGPP.
        * Updated pci.ids.
VersionDeltaFile
1.50+8-8sysutils/pciutils/distinfo
1.3+7-7sysutils/pciutils/patches/patch-Makefile
1.3+2-2sysutils/pciutils/patches/patch-lib_libpci.pc.in
1.3+2-2sysutils/pciutils/patches/patch-lib_configure
1.60+2-2sysutils/pciutils/Makefile
1.8+1-1sysutils/pciutils/patches/patch-lib_internal.h
+22-226 files

NetBSD/pkgsrc wQhzTXAdoc CHANGES-2026

   doc: Updated audio/termusic to 0.13.2
VersionDeltaFile
1.2846+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 8X9w3EJaudio/termusic distinfo cargo-depends.mk, audio/termusic/patches patch-.._vendor_mio-1.0.2_src_sys_unix_selector_kqueue.rs

   audio/termusic: update to 0.13.2

   [V0.13.2]
   - Released on: May 6, 2026.
   - Change: updated MSRV to 1.88.
   - Change: enable feature `rusty-soundtouch` for linux, macos & windows CI builds
   - Change: enable feature `rusty-simd` on macos CI builds
   - Change: provide arm64 binaries for macos
   - Change: add `cargo-binstall` metadata to tui and server crates for pre-built binary installs.
   - Fix: change default port to `5101` to be below 49k
   - Fix server cannot be closed properly under windows, configuration are not saved.
   - Fix(tui): fix that "native" and "termusic default" theme also get auto-selected in config editor, if active.
   - Fix(tui): fix a bunch of places where colors were not applied at all or not correctly applied.
   - Fix(tui): fix help popup not having "fast navigation" (like PageUp / PageDown, Home / End).
   - Fix(tui): change to use `icy_sixel`, removing the need for `libsixel`.
   - Fix(tui): fix `alphanumeric-sort` not building due to yanked versions.
   - Fix(tui): change search popup load keys to use `library_keys.load_track` instead of `navigation_keys.right`.
   - Fix(tui): fix yt-dlp download error caused by orx treeview.
   - Fix(tui): fix netease lyric download error.

    [12 lines not shown]
VersionDeltaFile
1.55+614-499audio/termusic/distinfo
1.50+203-165audio/termusic/cargo-depends.mk
1.1+18-0audio/termusic/patches/patch-.._vendor_mio-1.0.2_src_sys_unix_selector_kqueue.rs
1.72+3-4audio/termusic/Makefile
+838-6684 files

NetBSD/src ZTuIMxVlib/libpthread pthread_types.h

   libpthread: comment unused fields unused
VersionDeltaFile
1.28+7-10lib/libpthread/pthread_types.h
+7-101 files

NetBSD/src We2YaUxlib/libpthread pthread_cond.c

   libpthread: replace &pthread__cond_dummy with an artificial invalid pointer

   a motivation is to make unexpected accesses trap.

   this would also save a bit of memory and relocation. (at least on x86)
VersionDeltaFile
1.79+7-7lib/libpthread/pthread_cond.c
+7-71 files

NetBSD/src 6meYKOAlib/libpthread pthread_mutex.c

   libpthread: retire struct waiter

   two identical structures, struct waiter and struct pthread__waiter,
   were introduced by a single commit in 2020.
   ("- Make pthread_condvar and pthread_mutex work on the stack...")
   since then, they have always been assumed to be identical.
   let's retire one of them and use a single copy.

   no functional changes are intended.
VersionDeltaFile
1.84+3-8lib/libpthread/pthread_mutex.c
+3-81 files